Technology & Cyber Security Audit Manager

Job Title: Technology & Cyber Security Audit Manager

Department: Internal Audit – Technology & Cybersecurity Audit

Reporting To: Head of Technology and Cybersecurity Audit

Grade: N/A

Number of Reportees: None

Salary range- 25000 - 33000 AED per month

Job Purpose

The Technology & Cyber Security Audit Manager leads and executes audits within the technology and cybersecurity domains, specifically for a fully cloud-agnostic environment with advanced cyber defense and DevOps capabilities. This role ensures compliance with regulatory requirements and internal standards by reviewing technology and information security governance, architectures, processes, third-party relationships, and infrastructures. Key responsibilities include producing insightful audit reports, leveraging data analytics for continuous auditing, and conducting special reviews and investigations. Additionally, the position focuses on fostering effective stakeholder relationships and refining audit methodologies to align with the bank's innovative and dynamic operational and technological landscape.

Key Responsibilities

Audit Planning and Execution

• Plan, schedule, execute, and monitor audits within assigned domains, ensuring alignment with approved audit plans and timelines.
• Conduct audit work in accordance with internal audit standards, regulatory requirements, and international frameworks such as ISO, PCI DSS, NESA, SWIFT-CSP, SOC2, and CCSS.

Audit Reporting and Monitoring

• Produce comprehensive audit reports detailing findings, associated risks, and actionable recommendations.
• Monitor and follow up on the closure of previously raised audit findings to ensure timely resolution.
• Provide regular updates to the Head of Technology & Cybersecurity Audit, department heads, and other relevant stakeholders on audit progress and corrective measures.

Continuous Auditing and Ad-hoc Reviews

• Support other business audits by performing data extraction and analytics.
• Facilitate continuous auditing by implementing innovative data-driven methodologies.
• Participate in investigations, special reviews, or other related assignments as directed by the Head of Technology & Cybersecurity Audit and Chief Audit Executive.

Audit Methodology and Process Improvement

• Continuously refine audit methodologies, tools, and processes to enhance the efficiency and effectiveness of audit activities.
• Ensure alignment of audit practices with emerging technologies, trends, and industry best practices.

Collaboration and Stakeholder Management

• Maintain effective working relationships with business units and key stakeholders to foster cooperation and alignment.
• Act as the subject matter expert for technology and data analytics requirements within the Internal Audit Department.
• Periodically review information technology and security architectures to ensure compliance with internal policies and regulatory standards.

Vendor Risk Management and Business Continuity

• Periodically assess contracts and service level agreements (SLAs) with third-party service providers to ensure adherence to agreed-upon terms.
• Coordinate with outsourced staff to ensure quality and consistency in audit assignments.
• Review the effectiveness of Business Continuity Planning (BCP) and Disaster Recovery (DR) processes, identifying areas for improvement and compliance gaps.